Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8b5e3c6-b943-3ae3-bfe6-3e8341c5fdb1.roa
File:                     c8b5e3c6-b943-3ae3-bfe6-3e8341c5fdb1.roa (raw, json)
Hash identifier:          2boKgJ8H15zKBGeyyK+G8lP7hoqJANQTaR2UbcU/RQU=
Subject key identifier:   6C:F4:04:99:46:C4:B4:BF:B1:21:80:D3:39:69:F6:06:F5:7D:0A:DA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1707C92A2CBF1DEF978F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8b5e3c6-b943-3ae3-bfe6-3e8341c5fdb1.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        35.213.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:07:c9:2a:2c:bf:1d:ef:97:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3b625834-d38a-4ef3-b54e-aed2c8f9fb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:57:2b:4d:28:1f:40:32:de:dc:b7:8f:81:
                    ba:f8:35:3d:5a:94:54:91:00:7b:46:7a:21:d0:60:
                    5a:42:20:06:24:96:b7:a0:32:18:31:cf:8f:74:c2:
                    39:08:d1:fd:b4:a0:d7:2b:eb:ba:82:c6:a9:74:7e:
                    c3:c3:e9:3c:43:6f:8d:93:ee:48:4e:8b:1a:5c:83:
                    95:f4:1b:25:f4:f8:20:93:8b:80:18:e5:c2:ec:2c:
                    d3:3b:fd:6a:4b:50:ad:d5:a2:af:47:34:58:af:59:
                    03:b6:ee:b7:c5:ad:61:26:a2:01:7e:4f:e1:98:40:
                    0d:66:cb:c7:97:d3:fc:af:82:39:5d:03:7c:15:57:
                    c8:89:62:7b:41:09:d8:2a:ac:9f:78:68:cf:7c:71:
                    4c:4e:e8:07:01:c4:e7:ef:81:4d:51:f3:16:56:e7:
                    03:b9:f1:99:00:dd:97:4d:b0:06:15:10:e5:e9:47:
                    ce:e3:06:cf:78:3c:16:3c:db:f3:77:ed:73:34:e9:
                    19:09:25:20:10:b1:09:e5:97:8c:25:8e:d9:b0:f8:
                    a6:e8:78:9f:af:65:95:19:e0:7d:09:c9:bb:1a:98:
                    52:72:71:0d:a5:4e:d7:57:05:f1:54:a6:db:91:2a:
                    dd:05:5b:13:9d:14:d1:9c:05:01:d8:45:85:30:b3:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F4:04:99:46:C4:B4:BF:B1:21:80:D3:39:69:F6:06:F5:7D:0A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8b5e3c6-b943-3ae3-bfe6-3e8341c5fdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.213.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fb:bd:e0:5c:20:02:1b:f8:15:f3:da:ec:ad:6b:1b:c2:f7:
         ea:ea:1f:09:0d:54:4f:83:56:3e:45:2b:7d:70:45:08:7e:4e:
         e8:81:27:63:ff:f8:f2:8d:fb:9b:44:99:48:96:9e:98:b3:da:
         cb:00:04:d2:e6:7b:ec:61:d8:45:cf:98:59:2f:c7:d0:8b:2b:
         8a:9b:91:0c:f6:bd:d7:3f:71:a2:20:7d:00:66:19:ff:de:b8:
         d1:93:35:bb:e0:f8:94:0b:49:8d:e7:8a:9e:99:0b:bf:b5:a4:
         db:7c:90:c6:48:b8:76:a1:c8:75:13:e8:ad:8f:e1:21:a8:93:
         77:60:5d:13:22:f8:da:11:33:74:e2:ca:ce:6c:b0:92:39:09:
         74:b8:09:da:de:b0:bc:c3:83:40:4c:3a:54:96:c3:eb:26:cc:
         16:cc:64:ae:dd:97:53:5c:88:86:3e:69:67:6f:c1:eb:2e:c4:
         a7:2a:dd:8f:cc:92:a4:85:1e:9f:10:b8:d9:51:33:6b:03:89:
         a3:03:35:4e:f9:85:ae:3f:c0:37:5f:4b:e1:7f:04:ef:36:d5:
         d0:9a:00:35:6a:0a:10:4a:54:b4:36:d9:88:d4:c5:bc:d5:9d:
         9b:f6:84:a1:c7:2b:e1:fc:a9:89:1a:12:17:be:3d:40:66:11:
         fa:d4:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:34 2025 by rpki-client